SQL Injection

Every one of the 2 is a mark on the map. Named now: 1 to 2, most at risk first.

1. A SQL injection flaw was found in katello's errata-related API. An authenticated remote attacker can craft input data to force a malformed SQL query to the backend database, which…CVE-2018-14623The Foreman Project · CVSS 4.3 · 1.4% likely

   CWE-89

2. An input sanitization flaw was found in the id field in the dashboard controller of Foreman before 1.16.1. A user could use this flaw to perform an SQL injection attack on the bac…CVE-2018-1096Foreman Project · 1.3% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.